$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2059c963-068e-4fba-a7d6-639c3f36a91b.cer File: 2059c963-068e-4fba-a7d6-639c3f36a91b.cer (raw, json) Hash identifier: NXBjl/szisSUQz6vXFESnIr/pDBLzHqJRkuVXz7E91Y= Subject key identifier: 58:D6:58:0B:07:2C:61:5E:BD:DE:FF:F5:21:5C:B4:74:FE:92:DB:2D Authority key identifier: 3C:0D:7D:5C:BA:D6:A2:5E:FC:9D:0E:D5:57:F0:CA:24:63:54:8E:CA Certificate issuer: /CN=f60c9f32-a87c-4339-a2f3-6299a3b02e29 Certificate serial: 010D0C9F4328584DF63903A11CFD211186A0BB80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2059c963-068e-4fba-a7d6-639c3f36a91b/2059c963-068e-4fba-a7d6-639c3f36a91b.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2059c963-068e-4fba-a7d6-639c3f36a91b/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Tue 26 May 2026 12:45:18 +0000 Certificate not after: Mon 28 Aug 2028 12:45:18 +0000 Subordinate resources: AS: 397424 IP: 204.10.191.0/24 IP: 209.126.64.0/22 IP: 216.247.236.0/24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 14 Jun 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:f6:39:03:a1:1c:fd:21:11:86:a0:bb:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f60c9f32-a87c-4339-a2f3-6299a3b02e29 Validity Not Before: May 26 12:45:18 2026 GMT Not After : Aug 28 12:45:18 2028 GMT Subject: CN=2059c963-068e-4fba-a7d6-639c3f36a91b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:84:cc:13:12:03:f0:4f:7e:86:f5:9f:ce:73: b4:5d:21:72:99:bf:e9:66:66:ef:d9:9b:03:aa:db: 89:bf:96:64:b7:a1:b3:bd:4e:a4:b5:50:41:a5:8d: e8:9b:e3:b7:a1:74:e1:36:f3:43:60:c3:17:4e:78: ab:ed:82:5c:1a:ec:1c:da:f5:e7:5e:07:30:1d:ee: 55:c0:26:1f:bb:e0:f2:cc:26:18:da:24:9a:e8:2d: e4:6e:40:3f:2a:42:5c:db:4d:71:a5:08:83:70:98: cb:20:b0:21:56:ea:b6:ff:1e:d8:cf:db:0e:eb:9e: 37:26:11:c1:dd:aa:b2:ed:58:37:be:34:a2:b0:3b: 15:b9:17:ad:d6:44:46:bf:cf:eb:76:7b:e9:d3:56: e0:c3:ea:d8:55:25:fc:30:cf:3d:27:1e:ca:a2:9f: 11:2e:f9:26:02:f1:ff:6c:3a:e9:79:47:9c:6e:e2: 8c:83:47:1f:89:10:25:ef:5a:a7:ae:09:05:32:86: da:0b:b9:c5:22:e2:3c:63:8e:9c:c8:d7:7f:e9:65: 9f:22:22:d7:0f:3d:23:1f:0d:fb:fb:42:1e:9c:b5: 80:ca:0b:5e:2b:3d:35:4a:b8:62:ec:f2:28:f2:92: 34:fe:d4:c1:d8:3e:22:a2:96:5e:75:0d:92:1b:ac: ba:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:D6:58:0B:07:2C:61:5E:BD:DE:FF:F5:21:5C:B4:74:FE:92:DB:2D Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2059c963-068e-4fba-a7d6-639c3f36a91b/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2059c963-068e-4fba-a7d6-639c3f36a91b/2059c963-068e-4fba-a7d6-639c3f36a91b.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl X509v3 Authority Key Identifier: keyid:3C:0D:7D:5C:BA:D6:A2:5E:FC:9D:0E:D5:57:F0:CA:24:63:54:8E:CA X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer sbgp-ipAddrBlock: critical IPv4: 204.10.191.0/24 209.126.64.0/22 216.247.236.0/24 sbgp-autonomousSysNum: critical Autonomous System Numbers: 397424 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0e:a7:d9:ba:27:45:cc:92:c8:3b:fe:89:bd:00:76:f0:d5:13: 8f:fc:fa:d0:af:1c:b4:00:82:f6:26:dd:d0:a7:06:99:62:56: d6:16:40:20:cb:00:04:f7:27:d3:5e:cd:93:32:d5:b1:f9:68: db:25:d3:63:63:64:76:4d:f6:cc:85:cc:ae:8c:25:65:19:e7: 46:03:87:30:69:48:32:92:b0:c2:1e:be:d6:7d:f0:5a:1f:7f: c6:0d:38:b4:d6:c1:6b:e9:5f:07:93:05:ad:27:96:4a:8a:e1: 79:f5:35:c8:1e:40:ed:bf:1c:b5:03:96:67:25:95:f5:a4:a7: 88:a1:1a:0f:2a:22:1f:e2:49:3d:82:6a:1b:56:18:51:68:ad: 4e:0e:bf:a8:99:57:06:fb:3c:c3:0c:42:c3:9f:f7:16:a6:83: 43:02:32:c1:e4:57:1c:d9:34:df:72:5f:24:f0:7f:16:e8:51: b3:56:7c:c2:dd:9c:78:0f:ca:32:ee:2d:43:36:2a:a3:08:76: 22:0b:f9:38:56:39:6e:dd:b2:4b:5b:0e:ce:f2:52:b0:d8:37: f2:c0:c4:cc:46:f1:55:29:e5:d5:2b:5a:82:8b:2b:a3:30:25: 45:8c:ed:70:15:35:15:d1:cc:f9:c4:be:58:c8:3e:cc:a6:0e: 4e:ff:48:1a -----BEGIN CERTIFICATE----- MIIHFTCCBf2gAwIBAgIUAQ0Mn0MoWE32OQOhHP0hEYagu4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjYwYzlmMzItYTg3Yy00MzM5LWEyZjMtNjI5OWEzYjAy ZTI5MB4XDTI2MDUyNjEyNDUxOFoXDTI4MDgyODEyNDUxOFowLzEtMCsGA1UEAxMk MjA1OWM5NjMtMDY4ZS00ZmJhLWE3ZDYtNjM5YzNmMzZhOTFiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkoTMExID8E9+hvWfznO0XSFymb/pZmbv2ZsD qtuJv5Zkt6GzvU6ktVBBpY3om+O3oXThNvNDYMMXTnir7YJcGuwc2vXnXgcwHe5V wCYfu+DyzCYY2iSa6C3kbkA/KkJc201xpQiDcJjLILAhVuq2/x7Yz9sO6543JhHB 3aqy7Vg3vjSisDsVuRet1kRGv8/rdnvp01bgw+rYVSX8MM89Jx7Kop8RLvkmAvH/ bDrpeUecbuKMg0cfiRAl71qnrgkFMobaC7nFIuI8Y46cyNd/6WWfIiLXDz0jHw37 +0IenLWAygteKz01Srhi7PIo8pI0/tTB2D4iopZedQ2SG6y6OwIDAQABo4IEJzCC BCMwHQYDVR0OBBYEFFjWWAsHLGFevd7/9SFctHT+ktstMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8y MDU5Yzk2My0wNjhlLTRmYmEtYTdkNi02MzljM2YzNmE5MWIvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZjYwYzlmMzIt YTg3Yy00MzM5LWEyZjMtNjI5OWEzYjAyZTI5LzIwNTljOTYzLTA2OGUtNGZiYS1h N2Q2LTYzOWMzZjM2YTkxYi8yMDU5Yzk2My0wNjhlLTRmYmEtYTdkNi02MzljM2Yz NmE5MWIubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5 ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9mNjBjOWYzMi1hODdjLTQz MzktYTJmMy02Mjk5YTNiMDJlMjkuY3JsMB8GA1UdIwQYMBaAFDwNfVy61qJe/J0O 1VfwyiRjVI7KMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2 MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS5jZXIwKwYIKwYBBQUH AQcBAf8EHDAaMBgEAgABMBIDBADMCr8DBALRfkADBADY9+wwGgYIKwYBBQUHAQgB Af8ECzAJoAcwBQIDBhBwMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4Bggr BgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3Bz Lmh0bWwwDQYJKoZIhvcNAQELBQADggEBAA6n2bonRcySyDv+ib0AdvDVE4/8+tCv HLQAgvYm3dCnBpliVtYWQCDLAAT3J9NezZMy1bH5aNsl02NjZHZN9syFzK6MJWUZ 50YDhzBpSDKSsMIevtZ98Foff8YNOLTWwWvpXweTBa0nlkqK4Xn1NcgeQO2/HLUD lmcllfWkp4ihGg8qIh/iST2CahtWGFForU4Ov6iZVwb7PMMMQsOf9xamg0MCMsHk VxzZNN9yXyTwfxboUbNWfMLdnHgPyjLuLUM2KqMIdiIL+ThWOW7dsktbDs7yUrDY N/LAxMxG8VUp5dUrWoKLK6MwJUWM7XAVNRXRzPnEvljIPsymDk7/SBo= -----END CERTIFICATE-----Generated at Sat Jun 13 10:10:10 2026 by rpki-client